Admin Tools

#24556 Problems with CSRF filtering

Posted in ‘Admin Tools for Joomla! 4 & 5’

This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version

n/a

PHP version

n/a

Admin Tools version

n/a

Latest post by on Wednesday, 30 March 2016 17:20 CDT

Monday, 29 February 2016 02:46 CST

nvsdesign

I'm using the CSRF filtering option to prevend spam being sent trough my form. Some users get a 403 message after filling in the form and some users can fill in the form without problems.

I just discovered that if a user goes directly to the link with the form, they get the 403 message. If one first visites other pages on the website, the form gives no errors. I've read that CSRF blocks the form submission if the previous page is not from the same website. This means that I can never sent the subscribtion link directly to people.

How could this be solved? Disable CSRF is no option because of the spam.

Regards Niels

Monday, 29 February 2016 03:19 CST

tampe125

Hello Niels,

first of all let's double check that the problem is indeed caused by Admin Tools.
What's the level of the CSRF protection?
Can you please try to disable the CSRF protection and to a quick test in both scenarios (access directly to the link and surfing from your website)?
Do you still have the same issues?

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Wednesday, 30 March 2016 17:20 CDT

System Task

system

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.

Edited by on 2016-03-30 17:20 CDT

Support